Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d70f2bb4-f336-39cd-b0cc-1097104c6588.roa
File: d70f2bb4-f336-39cd-b0cc-1097104c6588.roa (raw, json)
Hash identifier: wzehs/zGMvpst0m3dZg9fP8ri6kRWu/f1YrbRPxSd6M=
Subject key identifier: 11:27:E0:7B:94:A1:3F:76:E0:9A:DB:BE:05:6F:C3:13:C0:92:3A:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B6E0D7AD8990D402781CC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d70f2bb4-f336-39cd-b0cc-1097104c6588.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.164.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:6e:0d:7a:d8:99:0d:40:27:81:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=402f5a20-13d8-4f97-b3be-f82d9d57f4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:79:e9:cf:bb:55:5f:7a:33:c7:8a:bb:1d:
33:e7:c2:1d:e4:bb:5e:a7:41:91:cc:ce:87:79:11:
35:0c:b1:0b:0f:ca:1c:1c:c1:f3:68:17:5e:cc:3d:
fe:b5:85:95:50:a8:17:ab:90:58:e3:51:1c:bb:09:
46:97:ce:6c:b3:84:3c:d7:51:ee:2c:d0:27:d8:5e:
7f:b6:7d:a6:8e:f4:51:76:2f:10:9a:8a:dd:bf:9f:
fd:e0:8b:b0:fb:7f:43:67:b3:e7:09:70:60:34:1c:
e6:13:82:a4:6a:c9:46:83:6b:cb:33:7f:58:02:01:
b7:8e:a4:1b:5c:96:fe:60:fa:09:26:27:80:e5:7f:
b9:66:95:3d:94:2a:8e:f9:78:93:f2:e6:02:cd:9e:
aa:39:e0:58:f3:17:33:bc:83:a1:c2:05:19:7b:fc:
a2:a6:1e:77:30:f0:df:83:af:9e:ab:a6:1e:40:47:
ef:46:e1:94:50:43:1c:9b:ee:a4:f4:5c:b7:e6:5b:
dd:66:0c:c2:8e:dc:64:b4:ab:0d:fc:22:f1:92:5f:
11:22:4e:80:20:c6:b5:06:7c:ef:68:1a:92:bf:17:
1a:79:11:b8:49:fb:45:73:4e:79:e2:09:b9:43:ca:
5d:a5:16:a0:63:30:fb:38:78:a3:65:44:09:33:54:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:27:E0:7B:94:A1:3F:76:E0:9A:DB:BE:05:6F:C3:13:C0:92:3A:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d70f2bb4-f336-39cd-b0cc-1097104c6588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.164.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:8c:6e:71:20:38:a4:c5:35:24:4f:1c:5e:ad:b4:15:99:96:
ee:dc:c0:94:aa:fc:00:ca:96:48:6e:f6:10:a0:03:d0:05:5e:
74:a2:0a:89:63:72:7e:cb:52:d0:f2:0a:b4:ec:94:30:f1:5f:
70:d3:3a:c6:33:47:fa:fc:2c:42:f8:49:92:da:a8:2d:5b:87:
a9:f5:bf:10:bb:a6:75:33:4e:f2:64:35:6b:b2:f1:b0:b6:b0:
9c:a1:54:1d:c6:74:c3:2b:57:45:1c:40:73:e1:51:a7:d0:73:
dd:8d:8e:19:95:db:5c:87:14:e8:16:37:26:c8:53:5b:0e:cd:
57:5c:95:75:bc:19:58:54:e2:4e:af:d4:e0:b9:3d:0d:92:5c:
7d:7c:5d:19:91:d6:ea:4b:b6:4d:49:89:1d:1f:12:ef:eb:fc:
b9:f1:c6:66:b5:7a:94:44:09:bf:03:48:91:18:8a:e4:3a:0f:
c5:60:cf:fc:d5:58:c2:2b:83:4b:34:aa:af:38:1a:03:40:5a:
2a:12:63:82:30:6e:8e:0b:69:70:e9:66:e9:6b:95:70:e7:b4:
ca:71:10:02:4c:87:1f:33:6c:8a:d5:a7:25:e9:7f:07:d5:9b:
a7:c6:f0:87:b0:a9:7c:b4:6b:51:c5:74:d8:73:47:3b:11:e8:
f0:47:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:03 2025 by rpki-client